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Abstract — It is shown that subclasses of separable binary 
Goppa codes , r(L, G) - codes, with L ^ {a e GF{2'^') : G{a) / 
0} and special Goppa polynomials G{x) can be presented as a 
chain of embedded codes. The true minimal distance has been 
obtained for all codes of the chain. 

Index Terms — Goppa codes, quasi-cyclic Goppa codes, minimal 
distance of separable binary codes. 

I. Introduction 

Any g-ary Goppa code r(L, G) -code can be defined by 
two objects: Goppa polynomial G{x) where G{x) is a 
polynomial of a degree t over GF{q^") and location set L 
where L = {a e GF{q"') : G{a) ^ 0}. 

Definition 1: A q-axy vector a — (ai...a„) of a length n 
where rt is a cardinality of the set L = (ai, q;„), G 
GF{q™) is a codeword of the r{L,G) Goppa code if and 
only if the following equation is satisfied: 

n 

^ ^-i^hr = OmodG{x). 
1=1 

The parity check matrix of the T{L, G) -code can be 
presented in the following form: 



G{x) = (x - - ai2)(x - a^°){x - a^^)ix - a*^){x 



a^3){x - a^°){x 



a 



54 \ 



H = 



G(ai) 



G(a„) 



G(ai) ••■ G(q„) 

It is known that the r{L,G) -code has following parameters 
[1]: 

the length of the code is equal to the cordinality n of the 
location set L, n < 

the dimension is fc > n — tm and 

the true minimal distance is d > t + 1. 

The r(L, G)-code is a binary Goppa code if q — 2. 

The T{G, L)- code is a separable Goppa code if all roots 
of its Goppa polynomial G are different. 

The following estimation of the true minimal distance for 
binary separable (L,G)-codes is valid [1]: 

d > 2i + 1. 

Binary separable Goppa codes have been studied by many 
authors. The binary separable codes with the location set over 
Gi^(2*') where s = 2,3, ... are of the greatest interest. 

M. Loeloeian and J. Conan were the first who considered 
the code of this class. In 1984 they presented [2] the best 
known (55,16,19)- Goppa code with the Goppa polynomial: 
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where a is a primitive element of GF{2^). 

In 1986 we considered [3] this code as a code from a 
subclass of Goppa codes with the Goppa polynomial: 

G(a;) = x^+i + V^x^ + Vx + l 

where V G GF{2^^) , i = 2' , L C GF{2^^) and 
n = 22' - t - 1. 

We have proved [3], [4] that the dimension of these codes is 
k > n-2l{t- §). 

In 1987 M. Loeloeian and J. Conan [5] considered a 
subclass of Goppa codes with the Goppa polynomial: 

G{x) =x* +x 

where t = 2' ,L C GF{2^^) and n = 2^' - t. 

They also gave the estimation for the dimension of these codes: 

k>n- 2l{t- I) - 1. 

The same estimation for the dimension of these codes was 
obtained by A.M.Roseiro, J. I. Hall, J.E.Adney and M.Siegel in 
[6] by using the kernel of an associated trace map. In this 
paper, the subclass of codes with polynomial G{x) = x*- + x 
was called as quadratic trace Goppa codes. 

In 1995 we described [7] the subclass of Goppa codes with 
the polynomial G{x) = a:*^^ + 1 and we have proved that 
the minimal distance of these codes is equal to their design 
distance. 

In 2001 P. Veron [8] investigated the structure of trace 
Goppa codes and proved that the true dimension for these 
codes is equal to the estimation obtained previously: 
k>n- 2l[t-l) - 1 

In 2005 P. Veron [9] proved that the estimation of the code 
dimension for Goppa codes with G{x) = x^^"^ + x*- +V x+1 
and G{x) = x*~^ + 1 is the true dimension for the codes from 
this subclasses [10]. 

In [11] and also in [12] (G. Bommer and F. Blanchet) and 
in [13] (P. Veron) it was proved that all the mentioned above 
codes are a quasi-cyclic binary Goppa codes. 

In 2007 G.Maatouk, A.Shokrollahi and M.Cheraghchi [14] 
tried to prove that the class of codes which was described in 
[7] achieved the GV bound. 

In this paper, we present all codes that were mentioned 
above as a chain of embedded codes. We obtain the true 
minimal distance for these codes. The rest of the paper is 
organized as follows. 

Section 2 describes the chain of Goppa codes subclasses. 

Section 3 gives several Lemmas for the true minimal 
distance for subfield subcodes: 
G^ix) = Cx*+^ + A^x* + Ax, 
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Ge{x) = + + Vx + 1 

where R e GF{2^), V e GF{2^^) and Gy{x) ^ x'+i + 1. 

In Section 4 similar Lemmas are presented for quadratic 
trace Goppa codes: 
G2{x) = + Ax and 
G3{x)=A*x'+Ax + G, 
where G GF{2'^^) and C G GF(2')). 

In Section 5 we obtain the true minimal distance for codes 
that are not subfield or trace codes: these new codes with a 
Goppa polynomial 
G4{x) = A'x* + A'-'^x'-^ + 1 
have not been described before. 

In Conclussion a table with parameters of codes from the 
code chain and table of binary quasi-cyclic codes from this 
chain are presented. 



1 



t— 1 I 1 

»1 



r 



Now let us obtain the parity check matrix Hi for a code 



r(Li,Gi) with Gi{x) 



+ 1, t = 2'- and Xi = 



{ai,a2,...,Q!„,_i,0}, m = 2^' - 2' + 1 : 



,+1 



II. Code chain 

Let us show how to obtain one code from another and to 
create a family of embedded codes, a so-called chain of codes. 

Definition 2: Let matrix be a parity check matrix of the 
binary Goppa code with a location set L* — {at^ , ai^ , ai„ } 
of different nonzero elements from GF{2^'') such that 7^ 
1 for aU J = 1, .., n and Goppa polynomial Gi{x) = -|- 
l,t = 2' : 



H* = 



Lemma 1: A row 



'+1 



'+1 



1 — J- I 1 
a . +1 



'+1 



cti + 



can 



be represented as a liriear combination of corresponding rows 
from the matrix H^. 
Proof: 
For any a G 

+ l ~ a(*-i)(a-('-i' + l) ~ a^'-^ (a-(t-i) + l) 

1 ^ 1 



2'-'(a*-i + l)2' 



Therefore the row 



a(a*-i + l)^ 
1 



can be obtained from the row 
the matrix . 
For any a G L* 

a(Q'-i+l)^ ^ l^(a*-i + l) 
1 



1 



a(a'-i + l)^ 

Therefore the row 



^ Q(a'-i + l)^ 

2' -1 
1 



2' -2 
ft 



of 



a 



(a* 



can 
of the 



be obtained from the row 
matrix H^. 

Corollary 1: By using the result of Lemma 1 we can rewrite 
the matrix in the following form: 



By using the power 2' of the first row from Hi we obtain: 



t-i 



+ 1 



t-1 



1 



The sum of this row and the first row from the matrix Hi 
gives us 



' 1 - 



7^ 
1 



1 



+ 



[ 1 ... 1 



-1 

Therefore the parity check matrix Hi can be rewritten: 

1 





H. = 



t-1 I 1 
ft^ +1 



t — 1 I 1 



+1 



t — 1 TT 



t-1 

t — 1 TT 
*ni-l+l 



1 



Let us define a parity check matrix for a subcode r(L5^, Gi) 
of the code r(Li,Gi) , 



)} = {Q!1,Q!2, 




1 


1 


t-1 1 1 
ai 


t-1 1 1 

"r^i-l+1 


t-1 1 1 

+1 




t-1 

"1 


t-1 

«„1-1 


1 


t-1 1 1 

«»1-1+1 
1 



HI 
1...1 



Lemma 2.- T{Ll, Gi) = r(i2, G2) where Gi{x) = a;*"^ + 
1 and G2(a;) = A^x^ + Ax, t = 2\ A G GF{2'^^). 
Proof: 

Obviously, r(Li,G2) = T{L2,Gl) where G^(x) = .t* + 
X = x*Gi{x) and the Goppa polynomial G2(x) = A^x^ +Ax 
can be obtained from G2 (a;) by using the Ax substitution for 
a variable x, A G GF{2^^). 

A parity check matrix H2 for the code r(L2,G2) with 
G2(a;) = x'^ + X, t = 2' and L2 = {ai, a2, an^}, n2 = 
22' - 2' is : 
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Ho = 



a\+ai 














"•2 







It is easy to see that this matrix can be rewritten in the 
following form: 



Ho 



^+1 



'+1 



From Corollary 1 the matrix _ff2 is equal to the matrix 
HI , therefore r(L|, Gi) = r(i2, G^) = r(L2, Ga). ■ 
(This statement has been proved by P.Veron in [13], [9] by 
using another approach.) 

Lemma 3: T{L2, G2) = r(L3, G3) where Gsix) = + 
Ax + C,C e GF(2') and A G GF{2^^). 
Proof: 

Using the x + f3 substitution for a variable x where /3 G 
Gi^(22') and /3 7^ A"'*"!) we obtain: 
G2{x+f3) = A*{x+f3y+A{x+l3) = A*x*+Ax+iA*l3* + 

AP) 

where (^*/?* + Af3f' = {Af3 + follows from the 

conditions of Lemma 3. Therefore C = A* (3* + A(3 , C 
G GF(20 and G2(a; + 0) = A*x* + Ax + C = Gaix) . 

■ 

Lemma 4: All codewords of the code r(Z/4, G4) with 
G4{x) = A^x^ + A*^^x^~^ + 1 have the zero value on 
the position correspondig to the element from L4 = 
{Q;i,a2, ...,Q;n4-i,0}. 
Proof: 

Obviously, by substituting x to A~^x in G4(a;) we obtain 
the same r(L4, G4) code with a more simple Goppa polyno- 
mial: G4(x) = X* + x*"^ + 1. 

Let us consider the parity check matrix of this code: 

1 1 



Hi 



" + 1 



714 — 1 



-1 + 1 



^+1 



1 t— 1 ~T 



Ji4 — 1 

By using the th degree of the first row of this parity 
check matrix we can obtain the following parity check row 
forr(i4,G4) : 

_t-l _t-l 

1 



<4-l+<4-l + l 

For this row and for the last row of the parity check matrix 

_ff4 and parity check row r for any codeword a = {ai...an^) 
of the code r(_L4, G4) the following expressions are valid: 

m — l a*^^ "4-1 q'^^ 

Y] 0,1— t — — = and V (li , "'t_i — = a„. . 

It is possible only in case when a„4 = for all codewords 
of the code r(L4,G4). ■ 

Corollary 2: The code r(L4,G4) is equal to the code 
r(L4,G4) with n| = 714 - 1, fc| = ki and L\ = 
{ai,a2, ...,Q!„4_i}. 

The parity check matrix H^of the code r(L|, G4) is: 



Hl = 



ai 

a*+a*"' + l 



, +Q* ^ , +1 
-1 714 — 1 

0:714-1 

_l+<il+l 



I +<-!+! 



Lemma 5: A row 



can be represented as a linear combination of the 
corresponding rows from the matrix H^. 

Proof: 
For any a E LI 



(a*+a'-i + l) a(*-i)(a+a-(*-i)+l) 

1 - r 1 . ... ^ 

1 1 



a2'--i(a+a-('-i)+l) 
2!-l 



a2'-i(Qt+a*-i+l) 

Therefore a row 



can be "obtained from the row 

oi-l-i 



«n4(<-i+<ii + l) = 



714 



of the matrix H, 



-i+<-i + l 



For any a G LI 

I + ( c^'-'-^ Y = + 



a 1 I g 

(o,t_|_„t-i_|_i)2 — a(a*+a*-i + l)^ a(a*+a*-i+l)2 

1 I g 

a(a*+a*-i+l) a(a*+a*-i+l)2 • 

For any a G i| 

^ (Q*+a«-i + l)2 



a(Q*+a*-i+l)^ 
2 



/ 2' 1 

\^ (a'+a*-i 



+Ty 



r 1 . . V I 1 

(a'+a'-i + l) J ' (a'+a'-i 



+TT 



Therefore a row 



ai(a*+a* ^+1) 



«n4«4-i+«' -1 + 1) 



can be obtained from the rows 



and 



-i+<ii+i 



1 



of the matrix H^. 



TI.4 — 1 TI.4 — 1 



Corollary 3: By using the result of Lemma 5 we can rewrite 

1 



matrix Hljm the following form: 



HI = 



ai(c«*+a*r^+l) 
1 

"1 

a*+a*"'+l 



«n4«^-l+<!_l + l) 



<4-l+"*r'4- 


1 + 1 


a7i4-i 




<4-l+"*"-4- 


1 + 1 


f-1 




"l 





i+<:!_i+i 



Now consider a code T{Ls, G3) with 03(0::) = A*x*+Ax+ 
C, i = 2' and Li = {qi, 0:2, a„3_i, 0}, ns = 2^' - 2*. 
Obviously, by substituting x to A~^Cx in 63(0;) we obtain the 
same r(L3, G3) code with a more simple Goppa polynomial 
Gaix) = X* + X + 1. The parity check matrix for this code is: 



H, 



a{+ai + l ■■ 
oil 



al+ai+1 ■■ 



? — 

»3- 



l+""3- 
« 7.3-1 



1 + 1 



jr,-i+«'»3-i+i 



H3- 



,+a 



713-1 



+ 1 
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It is easy to show that if we have a row ri in the parity 
check matrix : 



ri 



Q*+ai+l 

then the row 



a*+ai + l 



a\+ai + l 







is in the parity check matrix of this code, too. 
Therefore we obtain the following row: 

r* = [ 1 ... 1 ... 1 ] 

from these two rows and the first row of matrix 

ro = 



al+ai+l 



1 



By using the substitution ai 
become: 







t-1 

a 

"3- 


1 










-1 

3- 
1 


1+1 




^3 




-1 
3- 


1+1 


ai 






1 




1 


"3 


1 


-1 
3- 


1+1 




"3 




-1 
3- 


1+1 



"n3-l+""3-l + l 

the matrix will 



1 



and the row rt will be rewritten as: 

rt = 







3-1 113- 

The first row of the new matrix H3 will be the sum of its 
last row, the row rt and row r* . 

For the i-th element of the first row we will obtain: 

1 



a'+a +1 a*+« 



and for the element in the last column of the first row: 

1 = + 0+1. 
Consequently, it is possible to rewrite the matrix H^: 



1 





-^ + 1 




2 


















1 





1 



1 

t-1 



"L-i+<;-i+i 



<3-l+<;-l + l 
<3,-l+<-l + l 



1 1 



i/4 

Definition 3: Let us define a subcode r(L3,G3) of the 
code r(i3,G3) as shortened by a position corresponding 
to the element from = {ai, q;2, a„3_i, 0}. Hence 
r(i5, G3) C r(L3, G3) and nl^n^-l ,kl=k^-l and 
LI = L3\{0} . 

Lemma 6: T{Ll, G3) C r(i4, G4) where G4(a;) = A*a;* + 
+ 1, A e GF(22'). 



f roq/!" 

It follows directly from the above presentation of the matrix 



Corollary 4: 



HI 



HI 





1...1 1 



^ 1 1 ... 1 

Proof: 

It follows directly from Lemma 3 where we have proved 
the equivalence of two codes: r(i2, G2) and r(L3, G3) . ■ 

Lemma?: T{Li,G4) = r(L5,G5) where Gz{x) — 
Cx*+^ + A*x* +Ax,Ce GF(2'), and A e GF{2^^) . 
Proof: 

It is easy to show that G5{x) — x*G4{x) and L5 = L4\{0}. 
Obviously, by substiting x to A~^Gx in G5{x) we obtain 
the same r(L5, G5) code with a more simple Gl{x) — a;*+^ + 

.T* + X. 

The parity-check matrix for this code is: 



H5 = 



0!i(a5+a*-i + l) 
1 

Qj+tlj +Ql 



T14 — 1 T14 — 1 '^5 

f i t-1 I 



Therefore i/s = i?| according to Corollary 2 . ■ 
Lemma 8: r(L5,G5) = r(L6,G6) where G6(a;) = 
+ V^x* +Vx + l, R e GF{2^), and V e GF{2^^) 

Proof: 

Using the x + f3 substitution for a variable a; we obtain: 

G5{x + /3) = 

Gx'+i + (A* + G/3)x* + {A + C(3*)x + (G^*+i + A*/3* + A/3) 
where /? : /3 £ GF{2^^) and /3 ^ ^. Notice that (A + 
G^*) = (A* + G^)* and 

(G/3*+i + A*/3* + A/3)* = G/3*+i + A/3 + A*/3*. 
Therefore (G/3*+i + A*/3* + A/3) e GF{2^). 

Gq{x) = c^t+i_|_;\t^t+^^G5(x + /3) = 

(C/3*+i+A'/3'+yl/3)'^ "t" (C/3'+i+A*/3*+A/3)-^ 
(^+C;3') , 



(C/5'+i+A'/3*+A/3)' 

Ge{x) = + + V^a; + 1 



where i? = 



and V = 



(A+CV3*) 



(C/3*+i+A*/3*+A/3) ^ ~ (C/3'+i+A*/3'+A/3)- 

This means that r(L5, G5) = r(L6, Ge). ■ 
Lemma 9: r{Le,Ge) = T{L7,G7) where G7(a;) = 
Bx^~^^ + 1, i? = and a is a primitive element of 

GF{2^^). 
Proof- 
It can be proved in the same way as the previous Lemma 
by using the x + (3 substitution for a variable x where /3 = ^ 

■ 

In Figure [T] we present the structure of the code chain. It 
is possible to define the similar code chain for the codes 
described in paper [15]. 
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:ocles with even i 



ifeight 



codas with :ode 



gtli equal to 2 - t 



nuG.) W nu.G,) W r(L*,,G,) J 



codes with odd i 



r(L-,,G.) ^ 



r(L*4,G4) HLs.Gs) i , HLe.Ge) = r(L,,G7) 



where L*, = L, \{Q) , L*i = U V{0} 



Fig. 1. Code chain 



III. Minimal distance of subfield subcodes 

Lemma 10: The minimal distance of the last Goppa code 
in the chain T{L7,G7) exactly equals to its design distance, 
i.e. d = 2(t + l) + 1. 
Proof: 

It is easy to show that a polynomial +^ — 1 can be 

2'+l , 

presented as a product Y[ (x—a"^^^ ~^-') where a is a primitve 

i=l 

element of GF{2'^^). Choose some element A from GF{2'^'-) 
such that +^ 7^ 1 and let B = A~^. Thus we can calculate 
two polynomials with all different roots {Aa^^^ ~^^} and 
{Ba'<-^'-^^ i^l,..,2' + l. 



i=l 



The result of the multiplication of these two polynomials 
and X : 

^2^ + 1+3 _ (^2' + l ^ 52' + l)^2'+2 _ 

A formal derivative of result of this multiplication: 

Now consider a binary vector a — (aoai...a„) with nonzero 
elements on and only on positions {j — 1, .., (2'+^ + 3)) 
from the following subset of L: 

i = 1^ _ 2' + 1} U i = 

1,..,2' + 1}U{0} . 
From the definition of the Goppa code, this vector will be 
a codeword of r(L7, Gy) : 



1 _ 



-ft- 2;2i + l+3_(^2i + 1^52' + l-)^2i+2 



Omodx^ +^ — 1 
where (3j G ^ = i^..^2' + 1} U 

= 1,..,2' + 1}U{0}. 
Therefore the minimal distance of the Goppa code 
T{Lt, Gy) is equal to the design distance 2'+^ +3. ■ 
Corollary 5: The minimal distance of the equivalent Goppa 
codes r{LQ, Gg) and r(L5, G5) is exactly equal to its design 
distance, i.e. d — 2{t + 1) + 1. 



IV. Minimal distance of quadratic trace subcodes 

Lemma 11: The minimal distance of the equivalent Goppa 
codes r(L2,G2) and r(L3,G3) is exactly equal to the min- 
imal even weight of a codeword of the code r(i5,G5) = 
r(i6, Gg) = r(i7, G7) , i.e. d>2{t + l) + 2. 
Proof: 

It follows directly from the parity check matrixes H3,H2 
and iJs. ■ 

It is necessary to note that P.Veron in [13] has proved that 
the Hamming weight of all codewords of these codes is even. 

V. Minimal distance of the new code 

Lemma 12: The minimal distance of the r(L4, G4) and 
r(I/4, G4) Goppa codes is exactly equal to its design distance, 
i.e. d = 2(t + l) + l . 

Proof: It follows directly from the equivalence of codes 
r(i4, G4) and r(L5, G5) (Lemma 7). ■ 

VI. Conclusion 

Parameters of the codes forming a chain are presented in 
Table 1. 

In Table 2 we present the quasi-cyclic Goppa codes from 
our chain. It is easy to see that by substituting x by /3a; + 7 we 
will obtain the same code if the Goppa polynomial is invariant 
to this substitution: aG{x) = G{f3x + 7) where a, /?, 7 £ 
Gi^(22') . 

In Table 2 we present such values of 7 and (3 for the Goppa 
codes from our chain. 

Therefore these quasi-cyclic codes have indexes 2' — 1 and 
2' + 1. 
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Table 1 Parameters of the code chain 



r(L, G)-code with 
parity check matrix 


code length 


number of 
information symbols 


minimal distance 


r(Li,Gi), where 
G'i(x) a;*-i + 1 
parity check matrix: Hi 


m = - f + 1 


ki =22' - i-2/(i - 1) [9] 


di = 2i - 1 [7] 


T{Ll,Gi) , where 
Gi(x) + l , J 

parity check matrix: 


'A = Li\{0} 
Hi 1 


nl = 22' - t 


fcj = fci - 1 


d\ is even 
and equals to 
the minimal 
even weight 
of a codeword 
from the code 

r(Li,Gi) 


r(L27 G2), where 
G2(x) =A*x' + Ax 

parity check matrix: 




n2 = 22' - f 


k2 = k\ — l (Lemma 2) 

fc2 = 22'-f-2Z(t-|)-l [8] 


d2 = dl 


r(L3, G3), where 
Gaix) = A^x* + Ax 

parity check matrix: 


+ G 

" m 
1 




713 = 22' - f 


^3 = ^2 (Lemma 3) 


d3=dl 


r(i^,G3), where 

G3(a;) = A*x* +Ax + C , 1*^ = L3\{0} 

H^ 

parity check matrix: ^ 


= 22' - t - 1 


fc^ = A;3 - 1 (Definition 2) 


d3 = dt 


r(L4, G4), where 

Gi{x) = ^*a;* + + 1 

parity check matrix: iJ| 


n4 = 22' - f 


^4 = ^4 (Corollary 2) 


di = dr 


r(L|, G4) , where 

G4(a;) = A'x' + A'-^x'-^ + 1 , L| = L4\{0} 
parity check matrix: HI 


n| = 22' - t - 1 


^4 = ^3 (Lemma 6) 


dl = dr 


r(L5, G5), where 

G5(.t) = G.T*+i + ^'.T* + At 
parily check malrix: //| 


n,-, = 22' - f - 1 


kr, = ki (Lemma 7) 


d, = dr 


r(L65G6), where 

G6(.x) = + y'.-r'' + Vx + 1 
parily check malrix: 


no = 22' - f - 1 


fcf; = ki (Lemma 8) 


d(i = dr 


T{L7, G7), where 

G7(.70 = + 1 

parily check malrix; HI 


77,7 = 22' - t - 1 


kj = ki (Lemma 9) 

A-r = 22' -f -2J{f- 1) - 1 |9| 


dr = 2t + 3 

(Lemma 1 1) 



Table 2 Quasi cychc Goppa codes 



code 


G(x) 


7 




r(£i,Gi) 


x*-^ + 1 





any nonzero element from GF(2') 


r(L2,G2) 


A*x* + Ax 


A-^or 


any nonzero element from GF{2^) 


r(X3,G3) 


A*x* + Ax + C 


7 e GF(22') : A*7* + A7 = G(l + /3) 


any nonzero element from GF{2}) 


r(i5,G5) 


Cx'+^ + A*x* + Ax 


7 G GF(22') : C7*+i + A'7' + A7 = 




r(L7.G7) 


x*+i + 1 





(a2'-i)\i = l,.,.,2' + l 



a is a primitive element of GF(22') and A G GF{2'^^). 
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